Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
File: wRjjTglHnc6J72HZj0wqv4GJzyQ.mft (raw, json)
Hash identifier: LtGuHv0D5XhMWic6cPaD3Yey11K8bPN9JokbGo6Nc8g=
Subject key identifier: 40:A9:DD:78:71:71:1A:F7:71:4E:A6:A1:E9:69:45:4F:93:1F:E1:A5
Authority key identifier: C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24
Certificate issuer: /CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
Certificate serial: 0199221E34B239CB66E92DBD478F76E14E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
Manifest number: 045F
Signing time: Sun 07 Sep 2025 03:00:28 +0000
Manifest this update: Sun 07 Sep 2025 03:00:28 +0000
Manifest next update: Mon 08 Sep 2025 03:00:28 +0000
Files and hashes: 1: C_QylDjtmeXaqfQqwZx9bW-pizU.roa (hash: TxsogUKYtZ4fwZHLxBqP+QAdRfnbhKHLWlZVu8NvQ2Y=)
2: wRjjTglHnc6J72HZj0wqv4GJzyQ.crl (hash: B1RjgWGAxhzPbW1NwTyMSq9PsdkkT8DgYXVMbV5MFDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:34:b2:39:cb:66:e9:2d:bd:47:8f:76:e1:4e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
Validity
Not Before: Sep 7 03:00:28 2025 GMT
Not After : Sep 8 03:00:28 2025 GMT
Subject: CN=40a9dd7871711af7714ea6a1e969454f931fe1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:c3:d7:a1:78:66:12:e3:ae:aa:c6:e2:d5:
97:0c:3e:f8:0e:77:68:6d:1d:47:0b:84:b2:d5:50:
0d:a9:8c:18:77:61:67:ed:8a:9b:36:b8:eb:0a:35:
ac:d2:a1:fa:a9:34:e2:37:dc:8e:ee:e7:27:f5:12:
04:17:c3:b0:9d:91:e4:61:c0:66:80:1a:af:20:ca:
7f:4a:4a:58:91:fd:f1:06:41:c9:9b:2f:92:a5:27:
c0:54:e6:b5:9a:24:99:d3:30:3c:b3:b6:cc:3c:c1:
94:2b:64:77:61:35:36:cd:ed:11:f3:1e:14:fd:71:
89:de:39:78:bb:91:42:56:91:72:99:70:41:77:79:
c5:e2:56:c7:95:d2:c0:a4:f0:3d:01:02:29:8d:78:
54:8b:25:ea:95:da:52:60:65:cc:48:94:fb:b7:ce:
a4:a4:c9:8c:f6:86:95:dc:ab:94:89:7a:48:ed:d7:
70:e2:78:49:ac:7f:3f:55:9b:3a:5f:96:10:2e:a5:
c7:6d:5a:7a:1e:0b:98:53:27:6e:58:fd:e5:6e:32:
25:76:3c:dd:c4:4f:f1:48:9c:67:ff:f3:ed:83:a4:
a5:3f:80:5b:53:b2:1c:06:c9:6b:35:e9:50:16:85:
fa:3c:fc:39:27:76:a2:9f:10:27:f7:bd:10:cc:14:
12:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A9:DD:78:71:71:1A:F7:71:4E:A6:A1:E9:69:45:4F:93:1F:E1:A5
X509v3 Authority Key Identifier:
keyid:C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:32:94:56:97:4c:d6:02:86:2a:d5:2f:4e:a3:13:dd:24:2e:
40:cc:40:52:e2:85:e1:5a:94:87:4f:60:1e:8c:1b:04:78:d0:
df:70:df:4a:77:a9:32:15:30:4c:07:b0:76:b2:b8:dd:79:ad:
41:4d:26:e8:96:14:e7:73:cb:22:f6:fb:5c:35:79:ac:55:29:
92:4b:dd:41:95:3c:9d:eb:c7:77:5e:10:58:09:01:76:54:85:
8d:bd:7e:82:b2:31:f9:f9:04:7c:68:11:b5:2f:9d:11:c1:66:
25:9b:af:0c:72:73:e6:8b:6c:14:55:23:61:8b:84:33:6e:47:
48:b0:5b:e7:0a:89:2e:34:1e:8c:06:53:c2:5b:2b:cd:a9:c6:
63:95:e2:04:63:cb:c4:1b:32:1a:ef:d2:53:37:47:be:b0:36:
15:93:63:53:e6:ee:06:16:93:b9:3a:42:12:73:70:e1:fe:e7:
41:b9:bc:27:d8:2e:86:7d:12:88:50:07:0d:e5:24:8b:ca:fe:
e8:ea:65:a4:64:e9:da:2e:c9:bf:ae:fa:47:96:64:9f:a0:7c:
52:a5:67:4e:a9:9c:52:42:ca:76:ec:22:cf:22:e2:4f:08:88:
6a:3b:b2:7e:1d:51:52:9e:a4:27:99:24:5e:ff:8b:a9:4d:7c:
8c:a1:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:04 2025 by rpki-client